@vunexa/lixa 0.1.6-alpha.15 → 0.1.6-alpha.16

package/dist/export-types/index.d.ts

@@ -1305,6 +1305,7 @@ export declare class Lixa<TIdentity extends IIdentityProvider | IdentityConfig =
     private userResourceStore;
     private userAccountStore;
     private refreshMutexes;
+    private linkingChallenges;
     private identityProvider?;
     private credentialsManager?;
     private config;

package/dist/index.cjs

@@ -1460,6 +1460,7 @@ var Lixa = class _Lixa {
   userResourceStore = /* @__PURE__ */ new Map();
   userAccountStore = /* @__PURE__ */ new Map();
   refreshMutexes = /* @__PURE__ */ new Map();
+  linkingChallenges = /* @__PURE__ */ new Map();
   identityProvider;
   credentialsManager;
   config;
@@ -2225,13 +2226,9 @@ var Lixa = class _Lixa {
             }
           }
           const challengeToken = (0, import_crypto5.randomBytes)(24).toString("hex");
-          const stateStorage2 = this.stateHandler.stateStorage || this.localStateHandler.stateStorage;
-          await stateStorage2.saveState(
-            `linking_challenge:${challengeToken}`,
-            {
+          this.linkingChallenges.set(challengeToken, {
+            data: {
               provider: providerType,
-              codeVerifier: "",
-              createdAt: Date.now(),
               challengeToken,
               email,
               incomingProvider: providerType,
@@ -2241,8 +2238,8 @@ var Lixa = class _Lixa {
               hasPassword,
               tokens
             },
-            600
-          );
+            expiresAt: Date.now() + 6e5
+          });
           this.log(
             "WARN",
             "AccountLinking",
@@ -2432,9 +2429,15 @@ var Lixa = class _Lixa {
    */
   async confirmLinkingWithPassword(params) {
     const { challengeToken, password } = params;
-    const stateStorage = this.stateHandler.stateStorage || this.localStateHandler.stateStorage;
-    const stateKey = `linking_challenge:${challengeToken}`;
-    const cached = await stateStorage.getState(stateKey);
+    const challenge = this.linkingChallenges.get(challengeToken);
+    let cached = null;
+    if (challenge && challenge.expiresAt >= Date.now()) {
+      cached = challenge.data;
+    } else {
+      const stateStorage = this.stateHandler.stateStorage || this.localStateHandler.stateStorage;
+      const stateKey = `linking_challenge:${challengeToken}`;
+      cached = await stateStorage.getState(stateKey);
+    }
     if (!cached || !cached.challengeToken) {
       throw new InvalidStateError("Invalid or expired account linking challenge.");
     }
@@ -2463,7 +2466,7 @@ var Lixa = class _Lixa {
     if (!verifiedUser) {
       throw new InvalidCredentialsError("Invalid password for account linking verification.");
     }
-    await stateStorage.deleteState(stateKey);
+    this.linkingChallenges.delete(challengeToken);
     const providerType = String(cached.incomingProvider).toLowerCase();
     const incomingTokens = cached.tokens;
     const linkedAcc = {